diff options
| author | winter | 2025-01-20 17:48:33 +0000 |
|---|---|---|
| committer | winter | 2025-01-20 17:49:22 +0000 |
| commit | fb4cbc73bae831e68fe8234811184f46077db5e6 (patch) | |
| tree | 1118e58b6fc2936964b5e2364fdd873bbf7ec2a6 /templates/write_note_form.php | |
| parent | 6b78446c1d5b76438d40bbe68aa0397de533e61a (diff) | |
fix some xss situations
Diffstat (limited to 'templates/write_note_form.php')
| -rw-r--r-- | templates/write_note_form.php | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/templates/write_note_form.php b/templates/write_note_form.php index 914c48b..55ed77e 100644 --- a/templates/write_note_form.php +++ b/templates/write_note_form.php @@ -5,7 +5,7 @@ <?php call_template('actor_avatar', ['actor' => $actor]); ?> </a> <div class="basicInfo"> - <a class="displayName" href="/@/<?= $actor->handle ?>"><?= $actor->displayName ?></a> + <a class="displayName" href="/@/<?= $actor->handle ?>"><?= htmlspecialchars($actor->displayName) ?></a> <div class="handle">@<?= $actor->handle ?></div> </div> </div> |